Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: jp5Z1EEVOP8UFNYX3KN549KdNQNtExS3xcs9LXy0/LY=
Subject key identifier: 90:AF:03:3D:AC:20:64:9E:8D:67:AF:91:B2:27:40:29:57:6B:59:F9
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 019CC7BDE6C1973C2C3F005C6023FF5EF58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0D0A
Signing time: Sat 07 Mar 2026 10:00:37 +0000
Manifest this update: Sat 07 Mar 2026 10:00:37 +0000
Manifest next update: Sun 08 Mar 2026 10:00:37 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: m3JLhd7+FR6WrnRJRmrpHbrTMm+GQkRwAXAnPpxEEv8=)
2: 5IiWlb3vHBWlCp6tIVca2yVQHto.roa (hash: STYN3zexlvKSLuiZ3ZMU8hJ7HbklvtNxc22+hhIPD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:bd:e6:c1:97:3c:2c:3f:00:5c:60:23:ff:5e:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Mar 7 10:00:37 2026 GMT
Not After : Mar 8 10:00:37 2026 GMT
Subject: CN=90af033dac20649e8d67af91b2274029576b59f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:45:e1:c1:c0:fd:3c:3f:ec:2c:25:b3:55:
84:db:d5:46:98:b2:8d:a3:81:61:b9:fe:70:73:9a:
46:ec:86:76:8a:1f:61:88:97:28:70:d4:69:b9:47:
cd:14:11:a1:4c:cf:72:1f:14:29:59:7f:fb:9d:d8:
03:35:d9:3a:2b:fe:a7:e0:0d:f9:4a:e3:c2:ac:0d:
fc:c7:0f:b4:37:88:50:95:32:ac:48:3c:72:6a:6b:
08:e6:69:c0:a5:3a:9e:38:e3:44:5c:1e:f7:17:7a:
bf:c8:50:83:af:cf:56:0f:a0:8b:f8:f7:0a:30:6d:
55:0d:fe:75:be:10:0c:4a:0f:91:20:6f:ac:4c:be:
97:75:24:e0:8d:23:9d:d0:29:1a:6f:42:73:42:97:
2b:a2:5c:7b:95:6c:e0:d4:d3:34:44:8a:fd:2a:06:
16:df:7e:20:8e:82:c6:a1:5e:27:d5:2c:9f:36:88:
70:fb:70:50:b7:b3:70:7f:78:d9:df:54:eb:af:20:
5e:e5:6a:89:74:16:24:a7:99:24:f8:13:2f:4a:32:
e2:52:54:58:84:88:59:4e:dd:99:c0:5a:7d:74:be:
69:17:e8:15:fd:19:21:68:3a:aa:7a:9b:9a:4b:72:
7e:8b:a8:4d:37:b2:83:82:f4:72:e1:48:2a:53:b5:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:03:3D:AC:20:64:9E:8D:67:AF:91:B2:27:40:29:57:6B:59:F9
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b5:75:0d:5d:67:37:a9:f4:db:35:ff:43:aa:96:f9:9d:1c:
f4:f7:98:af:55:65:33:92:02:80:e4:83:3b:35:21:95:bd:26:
6d:a1:0d:c5:a2:10:43:a4:49:23:ba:ca:38:66:a7:e3:4a:5b:
11:e0:f5:29:41:a4:13:fb:c0:3c:7a:a5:95:44:57:d2:06:6f:
63:ae:08:bf:dc:b2:7f:bd:04:79:2e:3f:39:62:c6:bd:bf:01:
69:d4:0a:3b:34:ff:3d:66:8b:ef:f9:12:67:e4:ac:af:2b:f6:
5d:0a:b9:82:c9:b2:bb:1f:46:2e:80:65:cd:c2:0b:2b:6e:68:
6f:b7:65:54:c2:0b:5e:d2:d7:df:d3:59:b1:8e:7d:d2:92:93:
d7:32:db:df:1b:e1:5f:0a:70:d3:6d:f6:08:72:71:f4:04:68:
51:2e:7b:1a:49:c7:d1:50:39:54:00:dd:e6:7d:1f:0a:f6:4a:
5a:9f:0e:a5:41:2f:97:08:cc:40:8c:2d:a4:bc:63:64:a2:ca:
a8:c1:89:2b:96:50:9d:e9:0a:e0:b0:44:e3:de:21:ef:1f:b5:
7d:4b:4f:49:01:fe:09:6e:10:ed:c2:5c:c1:6e:56:58:41:8d:
00:0a:83:c5:3e:f5:ce:68:c3:15:de:94:09:11:eb:f8:6a:1a:
fe:17:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:03:52 2026 by rpki-client